If you can see this, Tor is now inside of Amethyst.
No more Orbot.
Discussion
Woah ... you are amazing.
👀
Vitor you make me happy ☺️🧅
Tor in Amethyst is a fantastic idea, but I still see this note in Damus.
Are you not supposed to?
I dunno, what's it mean "if I can see this"? Was it published to an onion relay? If so I assume it was republished, which defeats the demonstration of tor-in-nostr.
Or does it simply mean that the original post doesn’t expose the authors IP address to any relays. I’m trying to understand what all this means too.
Correct. It just transfers through Tor instead of the regular web. Everybody else can see it as soon as it reaches any open web relay.
Well done Sir! We appreciate your efforts.
Did you package and run the binary inside of the apk?
Yeah, the "new" package they are offering seems to have worked quite well for the past few hours. I didn't notice any crash from the lib itself, which was fairly common in the past.
nostr:nprofile1qqsrf5h4ya83jk8u6t9jgc76h6kalz3plp9vusjpm2ygqgalqhxgp9gpzfmhxue69uhk7enxvd5xz6tw9ec82cspzpmhxue69uhkummnw3ezuamfdejszyrhwden5te0dehhxarj9ekxzmnytql6f0 consider nostr:nprofile1qqsyvrp9u6p0mfur9dfdru3d853tx9mdjuhkphxuxgfwmryja7zsvhqpzamhxue69uhhv6t5daezumn0wd68yvfwvdhk6tcpz9mhxue69uhkummnw3ezuamfdejj7qgwwaehxw309ahx7uewd3hkctcscpyug feedback as an extra input in favour of uptading the TOR library in nostr:nprofile1qqsrf5h4ya83jk8u6t9jgc76h6kalz3plp9vusjpm2ygqgalqhxgp9gpzfmhxue69uhk7enxvd5xz6tw9ec82cspzpmhxue69uhkummnw3ezuamfdejszyrhwden5te0dehhxarj9ekxzmnytql6f0 wallet!!!
nostr:nprofile1qqsxg45ph8gx0vdrvtzta6xal7v86frx6jvstsnvhrlvtehmwwh4epqpz4mhxue69uhk2er9dchxummnw3ezumrpdejqz8thwden5te0dehhxarj94c82c3wwajkcmr0wfjx2u3wdejhgqg6waehxw309ahx7um5wgh8xct5wd68yctvd9sjucm0d5gajr69 also has succesfully implemented in #robosats
There is indeed a PR with the same code in Robosats fully working for Android https://github.com/ZeusLN/zeus/pull/2268 the only problem is iOS, which is becoming some sort of headache 😅
Are you also starting and stopping Tor on onResume and onPause? I thougtht it would create some issues, but it seems to be working just fine.
👀
Awesome
Maybe nostr:npub1sn0wdenkukak0d9dfczzeacvhkrgz92ak56egt7vdgzn8pv2wfqqhrjdv9 will come back
black magik
Released yet or just in your test env?
Can somebody explain how or why this is a big deal i would love to understand more. Its sounds important
I second this emotion
I agree. Eli5 please
The option to have baked-in privacy to a widely-nostr client is significant.
Without this, users are dependent on making sure they have an always-on VPN (or Orbot) enabled. Otherwise your IP is shown to pretty much every relay, all the time. Needless to say, terrible for privacy, dealbreaker for anonymity (think journalists under oppressive regimes).
The always-on VPN can be unreliable on mobile devices. Orbot slows all your web traffic and some websites/apps block the traffic entirely, so many people disable it (to do mobile banking, or just get on Reddit, for example) and don’t always remember to turn it back on. Just a host of opportunities for it to be a problem unless you’re meticulous about it.
Granted, one probably needs to enable Tor in Amethyst the first time around, unless the default setting is on (Vitor, could that be the default?), but still, this is a big step toward privacy-by-default in freedom tech tools.
There may be another impressive quality of this, having to do with being able to send events to relays over Tor regardless of whether or not the relay normally accepts Tor connections. I don’t know (because I haven’t read the spec and likely wouldn’t understand it, if it’s all code, anyway), but by the wording of the OP it sounds like there may be something to this as well.
Yeah i have always had a vpn on when using amethyst so i guess thats good. I do see people i follow that are NOSTR OGs i would consider and they always said they wont reply to DMs for privacy and security reasons i believe. Does this Tor integration help that as well?
The mentioned problem is related to the "old" NIP-04 specs, with which DMs leak metadata. The new NIP-17 version is safe.
Tor has no role in this.
Now we are going to need relay runners to also run their relay over TOR instead of just the naked web.
Legend!
Wen release
Nice! 🫡
nostr:npub18pudjhdhhp2v8gxnkttt00um729nv93tuepjda2jrwn3eua5tf5s80a699 nostr:npub10npj3gydmv40m70ehemmal6vsdyfl7tewgvz043g54p0x23y0s8qzztl5h nostr:npub1jk9h2jsa8hjmtm9qlcca942473gnyhuynz5rmgve0dlu6hpeazxqc3lqz7 nostr:npub1lqs30x7466guvx6r2cek8z9d4hpucycy7j08wx58cwx70m206q3qrscejr nostr:npub1yx6pjypd4r7qh2gysjhvjd9l2km6hnm4amdnjyjw3467fy05rf0qfp7kza
aí sim!
nostr:note1n82a3q2d7fvk8em6350v027092my90p6zahq8yx52zjmw9aghpfs9p7wwy
Baller
While it's great to have the feature, privacy focused users should not rely on it and use Orbot instead. Orbot avoids that an app leaks the IP address while Tor-enabled leaves it to the dev of the app to enable tor for all calls and not only for some.
Humm.. good point. Is Orbot really that good? I had cases of leaking IP with Orbot. If the dev is not carefu with connection setup (mostly issues with dependencies doing the connection), it can leak indeed.
I'm not an expert on Orbot but in which case and how could an IP leak using Orbot, assuming Orbot routs all the activated app's communication only over TOR? And how can an app developer fix this reliably? And how can the user know the client dev fixed it reliably 100% all the time with every update?
I'm talking out of the experience where an app used an installed Orbot to talk to some servers then a new dev team introduced other servers but did not care about using Orbot when the still available TOR option was activated, misleading the user to assume to be private where they are not.
Orbot utilizes android's VPN API so I assume it controls the full applications network stack (or full device if configured that way).
Still I think androids VPN stack has some holes.
nostr:nprofile1qqsyvrp9u6p0mfur9dfdru3d853tx9mdjuhkphxuxgfwmryja7zsvhqpzamhxue69uhhv6t5daezumn0wd68yvfwvdhk6tcpz9mhxue69uhkummnw3ezuamfdejj7qgwwaehxw309ahx7uewd3hkctcscpyug Can the in-app component cooperate with an ambient orbot? Best of both worlds?
Not necessarily. Orbot runs with and without VPN mode.
You shouldn't give privacy advice if you don't know what you're talking about.
It depends on whether Orbot is used as a VPN or as a proxy. In the former case, the application cannot escape Tor, in the latter case it can of course, avoiding using the proxy.
So Orbot as VPN is safer than current Amethyst's implementation, while the new built-in support has the same robustness, but avoid a dependency and all the troubles related to the configuration, offering a better experience to the user.
On the other side you have to monitor that Orbot is indeed running on the system, and not closed or crashed.
Sometimes, rarely, Orbot just closes.
rely on orbot as proxy put pretty the same trust in app devs not leaking ip. Using it with orbot as vpn put this trust into the os.
It only does that if you are using orbot as a vpn
I'm too dumb to fully understand what this means but it's provocative and it gets me going
My .onion relay node doesn't seem to connect without the Orbot.
nostr:npub1qny3tkh0acurzla8x3zy4nhrjz5zd8l9sy9jys09umwng00manysew95gx zapped ⚡️11,111 sats
nostr:note1n82a3q2d7fvk8em6350v027092my90p6zahq8yx52zjmw9aghpfs9p7wwy
😃
Nice! When will it be pushed out live to Google play?
Still showing a tag of v0.90.6-PLAY
What version tag means no more Orbot.
Excelente trabalho, Vitor!
Your work? Fantastic... Thanks!
congrats
Nice work 👍
👀
nostr:note1n82a3q2d7fvk8em6350v027092my90p6zahq8yx52zjmw9aghpfs9p7wwy
cool man
BLESS YOU VITOR
MORE NATIVE TOR PLEASE CLIENTS & WALLETS TAKE NOTE
🥵🔥
So, if now tor is pre Baked in amethyst, how can i disable it? Its just a question, and where can i see if its really active? Does it have a feedback?
nostr:nprofile1qqsgfhhxuemwtwm8kjk5uppv7uxtmp5pz4wm2dv59lxx5pfnsk98ysqpz9mhxue69uhkummnw3ezuamfdejj7p9kx2h
First thought. Maybe nostr:nprofile1qqsgydql3q4ka27d9wnlrmus4tvkrnc8ftc4h8h5fgyln54gl0a7dgspzemhxue69uhhyetvv9ujuurjd9kkzmpwdejhgqg5waehxw309aex2mrp0yhxgctdw4eju6t0qy2hwumn8ghj7un9d3shjtnddaehgu3wwp6kyfehcpn can inform him
How it started
How it's going
4 days 🤯
Amethyst - juicy, crisp, pleasing acerbity
h/t nostr:nprofile1qqsyvrp9u6p0mfur9dfdru3d853tx9mdjuhkphxuxgfwmryja7zsvhqpzamhxue69uhhv6t5daezumn0wd68yvfwvdhk6tcpz9mhxue69uhkummnw3ezuamfdejj7qgwwaehxw309ahx7uewd3hkctcscpyug
I saw you write it while you wrote it. Inspired by the npub most of us know a well. 🤭
Halt!
You have committed an international violation of state sovereignty. This shall be taken as a declaration of war.
Cease and desist now, or suffer the consequences next time you visit a French airport.
if you can see this, you can also see the tip below:
Congrats!
🎯
This is a huge thing.
Cool! Looking forward to giving that a spin!
I also should really get around to setting up an exit node. Or at the very least a routing node.
Tor is such a fundamental part of this space!